Acceptable Use Policy

Effective Date: August 9, 2026

1. Scope and Incorporation

This Acceptable Use Policy ("AUP" or "Policy") governs the use of all Avondale.AI commercial software, services, infrastructure, and deliverables (collectively, "Avondale.AI Resources"). This Policy is incorporated by reference into the Avondale.AI Terms of Service and is enforceable as part of those Terms. By using any Avondale.AI Resources, the Client agrees to comply with this Policy. This Policy applies to commercial engagements only. Consumer products, when available, are governed by separate terms.

2. Permitted Uses

• Internal Business Operations: Use Software and Deliverables for the Client's own internal business operations within the scope of the Engagement;
• Compliance Preparation: Use Deliverables (gap analyses, remediation roadmaps, policy drafts, knowledge bases) to prepare for compliance assessments and audits;
• Infrastructure Analysis: Use Services to analyze the Client's own infrastructure, networks, and systems;
• Internal Reference: Retain copies of Deliverables for internal reference after the Engagement concludes, subject to the limitations in the Terms of Service;
• Authorized Sharing: Share Deliverables with the Client's own employees, auditors, or assessors who have a need to know, provided they are bound by confidentiality obligations no less protective than those in the Terms of Service;
• Review and Comment: Review AI-assisted findings, request explanations, and provide feedback to Avondale.AI for correction and improvement of Deliverables during the Engagement.

3. Prohibited Uses

Intellectual Property Violations

• Copy, reproduce, distribute, or transfer Software or Deliverables to any third party, except as expressly permitted in Section 2;
• Reverse engineer, decompile, disassemble, or attempt to derive the source code, architecture, or internal workings of any Software;
• Modify, adapt, create derivative works from, translate, or alter any Software or Deliverables;
• Remove, alter, or obscure any copyright, trademark, or proprietary notices on or in any Software or Deliverables;
• Use any tool, technique, or process to extract, scrape, or harvest model weights, configurations, prompts, templates, or methodologies from Software;
• Sublicense, lease, rent, lend, or otherwise make Software available to any third party.

Competing Use

• Use Software or Deliverables to develop, train, or improve any competing AI system, product, or service;
• Use Software or Deliverables to provide services to third parties, including hosting, managed services, consulting, or auditing;
• Use Avondale.AI methodologies, templates, or processes revealed during an Engagement to create a competing offering;
• Disclose Avondale.AI pricing, methodologies, or proprietary information to any third party, except as required by law.

Unlawful or Harmful Use

• Use Avondale.AI Resources for any illegal purpose, or in violation of any applicable law, regulation, or contractual obligation;
• Use Avondale.AI Resources to infringe the intellectual property, privacy, or other rights of any third party;
• Use Avondale.AI Resources to store, process, or transmit unlawful, defamatory, or harmful content;
• Attempt to gain unauthorized access to Avondale.AI systems, infrastructure, data, or personnel information;
• Use Avondale.AI Resources in a manner that could damage, disable, overload, or impair Avondale.AI infrastructure or systems, or any third-party system;
• Introduce any virus, malware, malicious code, or harmful component into Avondale.AI systems or infrastructure.

Geographic Restrictions

• Use, access, or operate Software or Deliverables outside the United States;
• Export, re-export, or transfer Software or Deliverables to any country, entity, or person prohibited by United States export control laws;
• Permit access to Software or Deliverables by any person located outside the United States.

Circumvention

• Attempt to circumvent any access control, license enforcement, or usage limitation in Software;
• Use Software after termination or expiration of the Engagement;
• Retain copies of Software after termination, except as expressly permitted for Deliverables in the Terms of Service;
• Attempt to disable, bypass, or interfere with any monitoring, logging, or audit functionality in Software.

4. Customer Responsibilities

The Client is responsible for the following:

1. Hardware and Infrastructure: The Client is solely responsible for the procurement, maintenance, and security of any hardware, networks, and infrastructure on which Software is deployed. Avondale.AI is not responsible for hardware failures, network outages, or infrastructure issues on the Client's side.
2. Access Management: The Client is responsible for managing access to Software and Deliverables within its organization. The Client must ensure that only authorized personnel access Software and that terminated personnel have access revoked promptly.
3. Compliance with Laws: The Client is responsible for compliance with all applicable laws and regulations related to its use of Avondale.AI Resources, including data protection, privacy, and industry-specific regulations.
4. Accurate Information: The Client must provide accurate, complete, and current information to Avondale.AI for the purpose of Services. Inaccurate or incomplete information may result in inaccurate Deliverables for which Avondale.AI is not responsible.
5. Third-Party Software: If Software requires or integrates with third-party software, the Client is responsible for obtaining and maintaining all necessary licenses for such third-party software.
6. Notification: The Client must notify Avondale.AI promptly of any suspected or actual unauthorized access, use, or disclosure of Avondale.AI Resources.

Managed Service Provider Restrictions

MSPs and third-party technology providers are strictly prohibited from:

• Accessing, logging into, or attempting to access any Avondale.AI Software, configuration, model, or infrastructure component;
• Installing, deploying, updating, patching, modifying, or configuring any software on hardware where Avondale.AI Software is deployed;
• Establishing direct network connections to Avondale.AI Software or hardware hosting Avondale.AI Software, including but not limited to SSH, RDP, VNC, Telnet, HTTP/HTTPS administration interfaces, or any other remote access protocol;
• Maintaining, servicing, or performing any maintenance activity on Avondale.AI Software or the hardware hosting it;
• Running diagnostic commands, scripts, or tools against Avondale.AI Software or its host hardware;
• Modifying firewall rules, routing tables, or network configurations that affect Avondale.AI Software connectivity;
• Attempting to extract, inspect, or copy any Avondale.AI Software component, configuration, model, or data.

The only exception is basic availability monitoring: An MSP may verify that the hardware hosting Avondale.AI Software is reachable using a single ICMP echo request per the following specification:

• Protocol: ICMP (Internet Control Message Protocol), IPv4 only;
• Type: Echo Request (Type 8, Code 0). The host will respond with Echo Reply (Type 0, Code 0);
• Packet Size: Total ICMP packet size not exceeding 1024 bytes, including the 8-byte ICMP header and payload. No fragmentation permitted (DF bit set);
• Frequency: No more than one (1) echo request per sixty (60) second interval. Burst or continuous monitoring is prohibited;
• Source: Originating from the MSP's designated monitoring IP address only, as provided to Avondale.AI in writing;
• Response: ICMP does not use TCP or UDP ports. The echo reply is returned to the originating IP address at the IP layer. No connection is established, maintained, or logged as a session;
• Duration: Each echo request and reply must complete within the normal ICMP timeout for the Client's network. No sustained or persistent monitoring sessions.

No other monitoring, probing, scanning, or connection attempt is permitted. This includes but is not limited to: TCP port scanning, UDP port scanning, SYN scans, ACK scans, service detection, banner grabbing, SNMP queries (any version), HTTP or HTTPS health checks, SSH banner checks, Telnet checks, DNS queries against the host, ARP table inspection, or any protocol that establishes a connection, session, or exchange beyond a single ICMP echo request and reply.

MSP responsibilities are limited to:

• Physical hardware replacement (rack, stack, power, cabling) if the hardware is owned by the Client;
• Network connectivity at the switch port level (ensuring the port is active and properly configured by the Client's network team);
• Single ICMP echo request (1024 bytes maximum) for availability monitoring.

The Client acknowledges that Avondale.AI Software is a sovereign, local-first system managed exclusively by Avondale.AI personnel. Any unauthorized access, modification, or maintenance by an MSP or third-party technology provider voids all support, warranty, and service obligations immediately and may constitute a material breach of the Terms of Service. The Client is responsible for communicating these restrictions to any MSP or third-party technology provider it engages and for ensuring compliance.

5. Security Responsibilities

The Client must maintain reasonable security measures to protect Avondale.AI Resources, including:

• Maintaining current operating system updates and security patches on hardware where Software is deployed;
• Using strong, unique credentials for all accounts with access to Software;
• Restricting access to Software to personnel with a legitimate business need;
• Maintaining firewall and network security controls appropriate to the Client's environment;
• Not storing Software credentials, keys, or access tokens in unencrypted or publicly accessible locations;
• Promptly reporting any security incident involving Avondale.AI Resources to Avondale.AI.

Avondale.AI is not liable for any breach or security incident caused by the Client's failure to maintain reasonable security measures. The Client bears sole responsibility for the security of its own infrastructure.

6. Data Responsibilities

The Client retains all ownership of its data. The Client is responsible for:

• Maintaining backups of Client Data before providing it to Avondale.AI for analysis;
• Ensuring the Client has the legal right to share any data provided to Avondale.AI;
• Not providing data that is subject to restrictions that would prevent Avondale.AI from processing it as part of the Services;
• Notifying Avondale.AI of any special data handling requirements (e.g., classified, controlled unclassified, PHI, PCI) before the Engagement begins.

Avondale.AI processes Client Data on sovereign, on-premise infrastructure and does not transmit Client Data to third-party cloud services unless explicitly agreed in writing. See the AI Usage Disclosure for additional information about how AI interacts with Client Data.

7. Support and Warranty Conditions

Support for Avondale.AI Resources is provided under the terms of the applicable Engagement. The following actions may void support and warranty coverage:

• Modifying, patching, or altering Software beyond configurations documented or approved by Avondale.AI;
• Deploying Software on hardware or operating systems that do not meet the specifications provided by Avondale.AI;
• Failing to apply updates or patches provided by Avondale.AI within a reasonable timeframe;
• Using third-party tools or scripts to interact with Software in ways not authorized by Avondale.AI;
• Failing to maintain the security measures described in Section 5;
• Using Software outside the scope of the Engagement.

Avondale.AI reserves the right to charge additional fees for support services required due to Client actions that void standard support coverage.

8. Audit Rights

Avondale.AI may audit the Client's compliance with this AUP and the Terms of Service upon thirty (30) days written notice. Audits may include verification of:

• The number of authorized users and deployments;
• Compliance with license restrictions;
• Compliance with security requirements;
• Whether any Software has been copied, modified, or redistributed in violation of this AUP.

Audits will be conducted during business hours and will not unreasonably interfere with the Client's operations. If an audit reveals non-compliance, the Client must remediate within ten (10) days. Avondale.AI may charge the Client for the cost of the audit if material non-compliance is found. The Client must maintain records sufficient to demonstrate compliance for the duration of the Engagement plus three (3) years.

9. Enforcement

Avondale.AI may take the following actions in response to violations of this AUP:

1. Warning: For minor, first-time violations, Avondale.AI may issue a written warning requiring remediation within ten (10) days.
2. Suspension: For repeated or serious violations, Avondale.AI may suspend access to Software and Services immediately pending remediation.
3. Termination: For material violations, including any prohibited use in Section 3, Avondale.AI may terminate the Engagement immediately without cure period.
4. Legal Action: For violations involving intellectual property infringement, illegal activity, or unauthorized disclosure, Avondale.AI may pursue legal action including injunctive relief and damages under the Terms of Service and applicable law.

Avondale.AI reserves the right to take any action it deems appropriate to protect its intellectual property, infrastructure, and legal rights. The Client acknowledges that violations of this AUP may also constitute violations of federal copyright law (17 U.S.C. et seq.) and Arizona state law.

10. Changes to This Policy

Avondale.AI may update this Acceptable Use Policy from time to time. The effective date at the top of this page indicates when the current version was posted. Changes apply to new Engagements entered into after the effective date. Engagements already in progress are governed by the Policy in effect at the time the Engagement was initiated, unless the Engagement expressly provides otherwise.

Relationship to Terms of Service: This Acceptable Use Policy is incorporated by reference into the Avondale.AI Terms of Service. In the event of a conflict between this Policy and the Terms of Service, the Terms of Service control. This Policy does not create any warranty or right not expressly stated in the Terms of Service or the applicable Engagement.